CVE-2004-0455
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via...
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
CVE-2004-0455- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
CVE-2004-0455- Updated
- 2026-11-02
EUVDEUVD-2004-0454 No score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
EUVD-2004-0454- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-23h9-h5hh-w97x No score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via...
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
GHSA-23h9-h5hh-w97x- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
www-sqlDebian:3.0 |
before 0.5.7-17woody1, plus listed versions 0.5.0-50.5.5-10.5.7-130.5.7-4 |
0.5.7-17woody1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0455 is a high vulnerability (CVSS 7.2) in Www-sql Project Www-sql, published June 19, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in www-sql 0.5.7-17woody1.